Monitored company
Tropicapp
clause.watch tracks 1 legal document published by Tropicapp, re-reading each one every six hours. Below is what each document covers, in plain English.
Privacy Policy
Privacy Policy Overview
Last updated: October 20, 2023
Company: Tropic Technologies, Inc. (“Tropic”)
This policy covers information collected through the Tropic website, software platform, and related electronic communications. It does not generally cover offline information, other Tropic websites/apps, or third-party services and authentication systems.
1. Data Collection & Usage
Information collected
Tropic may collect:
- Personal information: Name, email address, account details, correspondence, survey responses, and information submitted through forms.
- Company information: Company name, size, structure, and number of employees.
- Technical and usage information: IP address, geographic location, browser and operating system, device information, traffic and log data, pages/resources accessed, and usage patterns.
- User Contributions: Information you post, transmit, or share with other users or third parties through the platform.
Information is collected directly from you, automatically through cookies and similar technologies, and potentially from third parties.
How it is used
Tropic may use information to:
- Provide, operate, personalize, and improve the platform;
- Respond to requests and provide requested products or services;
- Manage accounts and send service notices;
- Notify users of platform or service changes;
- Analyze usage and audience patterns;
- Send promotional communications, including potentially promoting third-party products or services; and
- Carry out purposes disclosed at collection or with your consent.
The policy permits broad use for purposes described when information is provided and “any other purpose with your consent.”
2. User Rights and Choices
Users may:
- Review and change certain personal information through their account profile;
- Email privacy@tropicapp.io to request access, correction, or deletion;
- Opt out of promotional email communications by contacting Tropic;
- Control cookies through browser settings.
Important limitations:
- Tropic states it cannot delete personal information without also deleting the user account.
- Requests may be refused where changes would violate law or make information inaccurate.
- Deleted User Contributions may remain in caches, archives, or copies held by other users.
- The policy does not expressly describe rights such as data portability, objection, restriction, or jurisdiction-specific rights under laws such as GDPR or CCPA.
- Disabling cookies may make portions of the platform unavailable or malfunction.
3. Third-Party Sharing
Tropic may share personal information with:
- Employees, contractors, service providers, and other business-support vendors;
- Parties involved in providing the service or fulfilling your request;
- Buyers or successors in a merger, restructuring, asset sale, bankruptcy, or similar transaction;
- Courts, regulators, government authorities, or law enforcement where legally required;
- Parties where disclosure is needed to protect Tropic, users, or others;
- Software vendors when a buyer gives permission or instructs Tropic to facilitate a transaction; and
- Prospective buyers, comparison vendors, or other transaction participants when the user is a software vendor.
Aggregated and de-identified information may be disclosed without restriction. Third-party advertising providers may independently collect information, and Tropic does not control their practices. A list of subprocessors is available at tropicapp.io/subprocessors.
Google single sign-on data is subject to Google’s API Services User Data Policy and Limited Use requirements.
4. AI/ML Training
The policy does not state whether user data, User Contributions, or platform data is used to train artificial intelligence or machine-learning models. Users should seek clarification from Tropic or review the applicable master services agreement, data-processing terms, or data management policy before submitting sensitive information.
5. Key User Obligations and Risks
Users are responsible for:
- Keeping passwords confidential and not sharing them;
- Ensuring information provided is accurate;
- Using the platform and User Contributions consistently with the master services agreement and acceptable use policy;
- Understanding that shared User Contributions may be viewed, copied, or redistributed by others; and
- Maintaining a current, deliverable email address for policy-change notices.
Tropic warns that no security system is impenetrable and that internet transmission occurs at the user’s risk.
6. Liability and Disputes
This policy contains no detailed limitation of liability, indemnity, governing-law, arbitration, or dispute-resolution terms. It refers users to the master services agreement and acceptable use policy, which may contain those provisions. The policy does disclaim responsibility for security breaches caused by circumvention of platform safeguards and does not guarantee complete security.
7. Policy Changes
Tropic may change the policy by:
- Posting the revised policy on the same page;
- Showing an update notice upon platform login; or
- Posting notice on the website home page.
Continued use after changes constitutes acceptance. Users are responsible for checking the policy periodically and maintaining a current email address.
Change history
2026-10-16 · Privacy Policy
Summary
The diff only states that approximately 51 words were removed from the document. It does not identify the deleted language or show any replacement text.
AI Training and Data Use
- No conclusions can be drawn about whether the contract’s treatment of customer data has changed.
- The deletion could potentially affect provisions concerning:
- Use of customer data to train, fine-tune, or improve AI models;
- Whether customer data is used for general-purpose model training or only to provide services;
- Consent, opt-out, or objection rights;
- Ownership or licensing of customer inputs, outputs, or derived data;
- Data retention, anonymization, or aggregation;
- Restrictions on using confidential or personal data for training;
- Use of data by affiliates, subprocessors, or third-party AI providers.
Legal Risk
Because the deleted 51 words are not provided, it is impossible to determine whether the change:
- Removes a customer protection;
- Expands or narrows the provider’s data-use rights;
- Eliminates a restriction or consent requirement;
- Changes confidentiality, privacy, intellectual-property, or compliance obligations; or
- Has no substantive legal effect.
Required Information
To perform a meaningful legal analysis, provide either:
1. The actual deleted language; or
2. The complete before-and-after versions of the affected provision.
Without that text, the only reliable conclusion is that the amendment is indeterminate and should not be accepted without reviewing the missing language.
2026-10-16 · Privacy Policy
Summary
The provided material states only that approximately 51 words were added to the document. It does not include the actual added text, deleted text, or replacement language.
AI Training and Data-Use Review
No conclusion can be drawn about whether the changes:
- Permit the customer’s data to be used to train AI or machine-learning models;
- Expand the provider’s rights to access, retain, analyze, or commercialize customer data;
- Allow use of customer data to improve models for other customers;
- Require anonymization, aggregation, or de-identification before training;
- Restrict the use of confidential, personal, or regulated data; or
- Provide the customer with an opt-out, deletion right, or audit/control mechanism.
Legal Risks
The actual legal risks cannot be assessed without the underlying redline. In particular, the added language should be reviewed for terms such as:
- “train,” “fine-tune,” “develop,” “improve,” or “enhance” AI models;
- “usage data,” “customer content,” “inputs,” “outputs,” or “telemetry”;
- Rights to use data in “aggregated,” “de-identified,” or “anonymized” form;
- Broad licenses allowing use for “any business purpose” or “service improvement”; and
- Data retention, disclosure, sublicensing, or transfer rights.
Please provide the full diff or the 51 added words, together with any surrounding contract language, for a substantive analysis.
2026-10-15 · Privacy Policy
Summary of Important Changes
1. No apparent change to AI-model training rights
The diff does not add, remove, or modify any express language concerning:
- Use of customer data to train, fine-tune, or improve artificial-intelligence or machine-learning models;
- Whether customer content, User Contributions, or personal information may be used for AI training;
- De-identification or aggregation of customer data for model development;
- Opt-out rights relating to AI training; or
- Restrictions on sharing data with AI providers.
Accordingly, the diff does not appear to create a new express right for Tropic—or restrict Tropic—from using customer data to train AI models. Any AI-related rights would need to be assessed under the unchanged general provisions concerning data collection, User Contributions, service providers, consent, and other disclosed purposes.
2. Clarification of information collection scope
The revised language makes minor grammatical and formatting changes to the description of information collected through:
- The Tropic Platform;
- Email, text, and other electronic messages connected with the Platform;
- Interactions with Tropic advertising and applications on third-party websites; and
- Third-party authentication procedures and applications or content, including advertising.
These changes appear primarily editorial and do not materially expand the stated collection categories, although the language continues to cover information obtained through third-party services and interactions.
3. User Contributions remain broadly covered
The definition of “User Contributions” remains substantively unchanged. It covers information posted on the Platform or transmitted to other users or third parties. The policy continues to state that such contributions may be posted or transmitted at the user’s direction. This may be relevant to AI or data-use analysis because customer-provided content could potentially fall within this broad category, but the diff does not change the applicable rights or restrictions.
4. Google SSO language updated
The reference to “Google’s Limited Use Policy” and Tropic’s use and transfer of information received through Google SSO was corrected typographically. No substantive change to Google-data permissions is apparent.
5. Additional privacy-notice link
The policy now more clearly links to Tropic’s candidate privacy notice. This may provide separate information about candidate or recruitment-related data processing. Users should review that notice if they interact with Tropic as a job applicant or candidate.
6. Other changes
The remaining changes are principally:
- Punctuation, quotation-mark, spacing, and apostrophe corrections;
- Minor grammar and formatting corrections;
- Clarification of references to Tropic’s data-management policy;
- No apparent change to security commitments, marketing opt-outs, subprocessors, or data-sale/transfer provisions.
Overall assessment: The diff appears primarily editorial and does not introduce an identifiable new legal risk concerning AI training or materially change customer-data rights.
2026-10-14 · Privacy Policy
Summary
The diff does not include the actual added language—only a statement that approximately 51 words were added. As a result, the legal effect of the amendment cannot be assessed.
AI Training and Data Use
- No specific language is provided addressing whether customer data may be:
- Used to train, fine-tune, or improve AI models;
- Shared with AI providers or other third parties;
- Anonymized, aggregated, or de-identified before use;
- Retained for model-training purposes after termination; or
- Excluded from training by customer opt-out rights.
Accordingly, it is not possible to determine whether the amendment creates, expands, or limits any rights to use customer data for AI training.
Risks That Cannot Yet Be Assessed
The missing text may affect important issues, including:
- Ownership and permitted use of customer data;
- Confidentiality and privacy obligations;
- Consent requirements;
- Use of personal, sensitive, or regulated data;
- Subprocessor and third-party access;
- Data retention and deletion;
- Model-output ownership and liability;
- Security obligations; and
- Customer audit, notice, or opt-out rights.
Please provide the actual 51-word addition, including the deleted and replacement language if applicable, for a substantive legal analysis.
2026-10-14 · Privacy Policy
Executive Summary
The diff appears to contain mostly typographical, formatting, and quotation-mark changes. It does not introduce clear substantive changes to the categories of data collected, purposes of use, disclosures, retention, security, or user rights.
Important Changes
1. No apparent change to AI-training terms
- The diff contains no express language authorizing or restricting the use of customer data to train, fine-tune, evaluate, or improve AI models.
- It also does not add language stating that customer data will be excluded from AI training.
- Accordingly, based solely on this diff, there is no identifiable change in the company’s AI-training rights.
- However, because the policy does not appear to contain a dedicated AI-training provision, it remains unclear whether customer content, User Contributions, usage data, or other information could be used for AI-related purposes under broader provisions such as service improvement, analytics, or other disclosed purposes.
2. Mostly editorial corrections
The following changes appear non-substantive:
- Replacement of straight quotation marks with curly quotation marks.
- Added spaces and punctuation around numbered lists and defined terms.
- Minor apostrophe changes, such as “Tropic's” to “Tropic’s” and “parties'” to “parties’.”
- Formatting corrections to references to the Website, Tropic Platform, Policy, personal information, and User Contributions.
- Minor formatting changes to the Google Limited Use Policy heading and the data-security section.
These changes should not materially alter the parties’ rights or obligations.
3. Website/footer formatting changes
The ending of the document appears to remove or reformat marketing copy, including:
- “Drive savings and efficiency at any stage”
- “Discover why hundreds of companies choose Tropic…”
- “Schedule a Demo”
This appears to be removal of webpage promotional content rather than a privacy-policy change.
The candidate privacy notice link remains, although the surrounding formatting has been cleaned up.
Risk Assessment
- New legal risk from the shown edits: Low; no material substantive amendment is apparent.
- AI-data-use risk: The absence of an explicit AI-training provision leaves an important ambiguity. Customers should not assume that their data is excluded from AI training merely because this diff adds no training language.
- Recommended clarification: Confirm whether customer data, prompts, User Contributions, transactional data, or metadata may be used to train or improve internal or third-party AI models, and whether customers can opt out or obtain contractual restrictions.
2026-10-13 · Privacy Policy
Diff Analysis
Scope of the Changes
The supplied diff states only:
> “Added approximately 51 words to the document”
It does not include the actual added language, deleted language, or replacement text. As a result, the legal effect of the amendment cannot be reliably analyzed.
AI Training and Customer Data
- No specific provision concerning the use of customer data to train, fine-tune, evaluate, or improve AI models is included in the provided diff.
- It is therefore not possible to determine whether the amendment:
- Authorizes use of customer data for AI training;
- Expands the categories of data that may be used;
- Permits use of data in de-identified, aggregated, or identifiable form;
- Allows sharing with affiliates, vendors, or third-party AI providers;
- Changes ownership or licensing rights in customer data or model outputs;
- Creates an opt-out or deletion right; or
- Adds confidentiality, security, retention, or regulatory limitations.
Other Legal Risks
The actual 51-word addition could materially affect:
- Data ownership and permitted-use rights;
- Confidentiality obligations;
- Intellectual-property ownership;
- Privacy and data-protection compliance;
- Security and breach responsibilities;
- Data retention and deletion;
- Liability allocation, indemnities, or disclaimers; and
- The customer’s ability to restrict secondary uses of its data.
Conclusion
No substantive legal conclusions can be drawn from the metadata-only description. The actual redlined text—particularly the 51 added words and any associated deletions or replacements—is required to assess changes to AI-training rights or other contractual risks.
2026-10-10 · Privacy Policy
Summary
The provided diff only states that approximately 51 words were removed from the document. It does not identify which words, clauses, or sections were deleted.
AI Training and Data Use
- No conclusions can be drawn about whether the contract now:
- Permits or restricts using customer data to train AI models;
- Allows use of customer data to improve products, algorithms, or services;
- Permits use of customer prompts, inputs, outputs, or metadata for training;
- Requires customer consent or provides an opt-out;
- Applies anonymization, aggregation, confidentiality, or data-retention safeguards; or
- Allocates responsibility for personal data, confidential information, or intellectual-property rights used in AI training.
Legal and Commercial Risk
Because the deleted language is not shown, it is impossible to determine whether the change:
- Expands or narrows the provider’s rights to use customer data;
- Removes restrictions, warranties, or confidentiality protections;
- Changes ownership or licensing rights in customer data or AI-generated outputs;
- Removes compliance obligations relating to privacy or data protection; or
- Increases the customer’s exposure to unauthorized disclosure, model memorization, intellectual-property claims, or regulatory risk.
Required Information
A meaningful review requires the actual deleted text, preferably with the surrounding unchanged provisions. A statement that 51 words were removed is not sufficient to identify the legal effect of the amendment.
2026-10-09 · Privacy Policy
Summary
The supplied diff does not include the actual added, deleted, or replaced contract language. It only states: “Added approximately 51 words to the document.”
AI Training and Data-Use Changes
- No substantive wording is provided that would allow assessment of whether the customer’s data may be:
- Used to train, fine-tune, or improve AI models;
- Used to develop products or services;
- Combined with other customers’ data;
- De-identified, anonymized, or retained for training;
- Shared with affiliates, vendors, or model providers; or
- Excluded from training or limited to providing the contracted services.
Accordingly, it is not possible to determine whether the amendment creates new rights for the provider or new risks for the customer concerning AI model training.
Other Legal Risks
The missing text also prevents review of potential changes involving:
- Data ownership and licensing rights;
- Confidentiality and permitted use;
- Data retention and deletion;
- Security obligations;
- Intellectual-property ownership;
- Regulatory compliance;
- Indemnities and liability limitations; and
- Termination or post-termination data handling.
Required Information
Please provide the actual 51-word addition and any surrounding language, using the specified notation:
- Additions:
{new text} - Deletions:
[deleted text] - Replacements:
[old text]{new text}
Without the underlying wording, no reliable legal comparison or risk assessment can be made.
2026-10-07 · Privacy Policy
Summary of Important Changes
Overall assessment
The diff appears to contain primarily non-substantive editorial and formatting changes, including:
- Replacing straight quotation marks with typographic (“curly”) quotation marks.
- Adding spaces after numbering and punctuation.
- Correcting apostrophe formatting (for example, “Tropic's” to “Tropic’s”).
- Minor punctuation and spacing changes.
- Reformatting or removing stray spacing and layout characters around headings and links.
These changes do not appear to materially alter the parties’ rights or obligations.
Data collection and use
The provisions describing information collection appear substantively unchanged. The policy continues to address information collected:
- Through use of the Tropic Platform.
- Through email, text messages, and other electronic communications.
- Through interactions with advertising and applications on third-party websites.
- Directly from users and automatically through platform use.
- From third parties, including authentication services and third-party applications or content.
The definitions of personal information, company-identifying information, and non-identifying information also appear unchanged apart from punctuation and formatting.
AI model training
No express change concerning the use of customer data to train artificial intelligence or machine-learning models is visible in this diff.
In particular, the diff does not add or remove language addressing:
- Training, fine-tuning, or improving AI or machine-learning models.
- Whether customer data, User Contributions, prompts, outputs, or usage data may be used for training.
- Whether data is used for model development on an aggregated, de-identified, or identifiable basis.
- Customer opt-out rights or restrictions on AI training.
- Ownership or licensing rights relating to AI-generated outputs.
Accordingly, this diff provides no clear evidence of a new AI-training permission or restriction. The complete policy and any separate agreement or data-processing addendum should be reviewed for such terms.
Other potentially relevant items
- References to Google’s Limited Use Policy and Tropic Google SSO appear to be reformatted only; no apparent change to Google-data permissions is shown.
- References to data management, security, subprocessors, and contact information appear unchanged in substance.
- The final portion contains apparent duplicated or malformed footer/link text. This may create a presentation or navigation issue, but it does not appear to change substantive legal terms.
Risk level
Low based on the provided diff. The principal limitation is that the displayed changes do not reveal any substantive AI-data-use language; absence from this diff should not be treated as confirmation that the policy prohibits AI training.
2026-10-07 · Privacy Policy
Summary of Important Changes
1. No express change to AI-model training
- The diff does **not add, remove, or modify any provision expressly addressing the use of customer data to train, fine-tune, evaluate, or improve artificial-intelligence or machine-learning models.
- There is no new customer-data license, de-identification right, or authorization for Tropic or its service providers to use customer content for AI training.
- However, the policy still contains broad descriptions of information collection and use, including use for “research purposes” and other purposes disclosed by Tropic. Those provisions could potentially be relevant to AI-related activities if interpreted broadly, but the diff itself does not clarify or expand them.
2. Mostly typographical and formatting changes
The following changes appear non-substantive:
- Curly quotation marks were replaced with straight quotation marks.
- Apostrophes were standardized, including references to Tropic’s, third parties’, and Google’s policies.
- Punctuation and spacing were corrected.
- The Google SSO heading was reformatted.
- The “Data Security” and “Contact Information” sections were reorganized or corrected.
These changes generally do not alter legal rights or obligations.
3. Clarification of contact and policy references
The revised language:
- Adds a clear contact email address for questions about Tropic’s data-management policy:
privacy@tropicapp.io. - Separates the “Contact Information” and “Subprocessors” references more clearly.
- Continues to direct users to Tropic’s subprocessors page and candidate privacy notice.
This may make the policy easier to navigate but does not appear to change Tropic’s substantive obligations regarding subprocessors.
4. Potentially important drafting issue: website contamination
The revised text appears to append marketing content directly to the candidate privacy notice URL:
> tropicapp.io/candidate-privacy-noticeDrive savings and efficiency...
This looks like accidental website or formatting content rather than an intended legal amendment. If published as written, it could:
- Make the URL unclear or unusable;
- Reduce the professionalism and readability of the policy; and
- Create ambiguity about whether the following marketing language is part of the privacy notice.
It should be corrected before publication.
5. Overall risk assessment
- Substantive legal risk from the shown changes: Low.
- AI-training risk: No express change identified; the policy remains silent on AI-model training.
- Operational/publication risk: Moderate, due to the malformed candidate privacy notice reference and appended marketing copy.
- The revised policy should be reviewed against the full current version to confirm that no omitted portions contain AI-training, customer-content licensing, or data-use provisions.
2026-10-03 · Privacy Policy
Summary of Important Changes
Overall assessment
The diff is primarily editorial and formatting-related. It standardizes quotation marks, apostrophes, spacing, and punctuation throughout the Privacy Policy. No material expansion or restriction of data rights is clearly shown in the redline.
Customer data and AI model training
- No express language about AI, machine learning, generative AI, or training models appears in the diff.
- The changes do not add or remove a stated right for Tropic or its service providers to use customer data, User Contributions, or personal information to train AI models.
- The existing broad language concerning collection, use, disclosure, and processing of information therefore appears unchanged based on the text provided. Customers should review the full, current policy and any separate terms, data-processing agreement, or product-specific AI terms for training-related permissions.
Other potentially relevant changes
- Scope of collection contexts: The wording around information collected through the Tropic Platform, electronic messages, third-party websites, applications, authentication procedures, and third-party content is largely unchanged, with punctuation and formatting corrections only.
- User Contributions: The definition and description of information users may post or transmit remain substantively unchanged. This language may still permit information submitted through the platform to be visible or transmitted to other users or third parties, subject to the policy’s existing terms.
- Google SSO: The reference to Google’s Limited Use Policy and Tropic Google SSO appears unchanged apart from typography and spacing.
- Disclosure in corporate transactions: The provision allowing personal information to be transferred as part of a merger, reorganization, bankruptcy, liquidation, or sale of assets remains substantively unchanged.
- Marketing opt-out: The language allowing users to opt out of promotional emails from Tropic concerning its or third parties’ products remains unchanged, including the opt-out email address.
- Security and data management: References to Tropic’s data management policy, contractual obligations, and legal requirements remain substantively unchanged.
- Subprocessors and candidate privacy notice: The links and headings were reformatted. The candidate privacy notice link appears corrected to
tropicapp.io/candidate-privacy-notice. A promotional “Drive savings and efficiency…”/“Schedule a Demo” section appears to have been removed from the displayed policy content; this is not a substantive privacy-rights change.
Risk conclusion
Based solely on this diff, there is no newly identifiable legal risk relating to AI training or secondary use of customer data. The main limitation is that the redline may not display every surrounding provision; confirmation requires comparing the complete prior and revised policies, especially any sections addressing permitted uses, de-identification, service providers, analytics, or AI features.
2026-10-02 · Privacy Policy
Summary
The provided diff does not include the actual added or deleted contractual language. It only states:
> “Added approximately 51 words to the document”
Accordingly, it is not possible to identify the legal effect of the change or assess any new risks.
AI Training and Customer Data
No language addressing the following is included in the diff, so no conclusion can be drawn about whether the contract now permits or restricts:
- Training, fine-tuning, or improving AI or machine-learning models using customer data
- Use of customer prompts, inputs, outputs, files, or other content for model development
- Use of aggregated, anonymized, or de-identified customer data
- Sharing customer data with AI providers, subcontractors, or other third parties
- Opt-out rights, consent requirements, or customer controls
- Retention or deletion of data used for AI training
- Ownership or licensing of customer data, inputs, or outputs
- Confidentiality and security protections applicable to AI-related processing
Risk Assessment
Because the actual 51-word addition is missing, the following potential risks cannot be evaluated:
- Expansion of the provider’s rights to use customer data
- Broad or perpetual licenses over customer content
- Permission to use data for commercial AI training or product improvement
- Reduced confidentiality or data-protection obligations
- Ambiguity regarding whether customer data is used by the provider’s affiliates or vendors
- Lack of an opt-out mechanism or limitations on sensitive or regulated data
Required Information
Please provide the actual revised language, including any surrounding section or clause. The change should be shown using the stated notation—for example:
- Additions:
{new text} - Deletions:
[removed text] - Replacements:
[old text]{new text}
Without the underlying wording, no reliable legal comparison can be performed.
2026-09-30 · Privacy Policy
Summary
The provided diff only states that approximately 51 words were removed. It does not identify which words, clauses, or sections were deleted.
AI Training and Data Use
- No conclusions can be drawn about whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models.
- It is also impossible to determine whether any restrictions, consent requirements, opt-out rights, confidentiality protections, or data-retention limits were removed.
- If the deleted language addressed AI training or model improvement, its removal could materially expand the provider’s rights to use customer data—or could remove a previously granted right. The effect depends entirely on the missing text.
Other Legal Risks
Because the actual deleted language is unavailable, the following issues cannot be assessed:
- Changes to ownership or licensing of customer data;
- Provider rights to retain, share, sell, or disclose data;
- Confidentiality and security obligations;
- Use of subcontractors or third-party AI providers;
- Data deletion and retention periods;
- Warranties, indemnities, and liability limitations;
- Customer consent, notice, or opt-out mechanisms.
Required Information
Please provide the full redline or the actual 51-word deletion, including the surrounding provisions. Without the deleted text and its location in the agreement, a reliable legal-risk analysis is not possible.
2026-09-30 · Privacy Policy
Summary of Important Changes
Overall assessment
The changes are primarily editorial, formatting, punctuation, and contact-information updates. The diff does not appear to add, remove, or modify any express provision authorizing Tropic to use customer data to train artificial intelligence (AI) or machine-learning models.
Substantive or potentially relevant changes
1. Data-management-policy contact information added
The revised text states that data is handled in accordance with Tropic’s data management policy and adds:
> “If you have any questions about our data management policy, please contact us at privacy@tropicapp.io.”
Risk/impact:
This does not change the permitted uses of data, but it directs users to contact Tropic for questions. The referenced data management policy should be reviewed separately because it may contain operational details or permissions not included in this Privacy Policy.
2. Privacy contact information clarified
A general contact section was added, providing:
> privacy@tropicapp.io
for questions or comments about the Privacy Policy or Tropic’s privacy practices.
Risk/impact:
This is generally beneficial for transparency and does not appear to create new data-use rights.
3. Subprocessor and candidate-privacy references retained or reformatted
The policy continues to direct users to:
- Tropic’s subprocessor list; and
- Tropic’s candidate privacy notice.
The formatting around these links was adjusted, and the candidate-privacy URL appears to have been followed by additional marketing text (“Drive savings and efficiency…” and “Schedule a Demo”).
Risk/impact:
The marketing content does not appear to alter privacy rights, but the unusual link/text insertion should be checked in the final published version to ensure that links are accurate and that promotional content is not mistakenly incorporated into the policy.
4. Google SSO language appears unchanged
The reference to Google’s Limited Use Policy and Tropic Google SSO was changed only typographically, including apostrophe and spacing changes.
Risk/impact:
No apparent change to Tropic’s use or transfer of information obtained through Google authentication.
5. Other changes are editorial
Changes include straight versus curly quotation marks, apostrophes, spacing, punctuation, and minor formatting. The categories of information collected, collection methods, User Contributions language, marketing opt-out language, business-transfer language, and security language do not appear substantively changed.
AI-model training
No new language expressly states that Tropic may:
- train AI or machine-learning models using customer data;
- use prompts, inputs, outputs, or User Contributions for model development;
- share customer data with AI providers for training; or
- use de-identified or aggregated customer data for AI training.
Likewise, no existing AI-training permission appears to have been deleted or narrowed in this diff. However, the separate data management policy, platform terms, or service agreement should be reviewed for AI-related provisions.
2026-09-26 · Privacy Policy
Summary of Important Changes
Overall assessment
The diff is primarily editorial and formatting-related. It standardizes quotation marks, apostrophes, spacing, numbering, and punctuation. It does not appear to introduce or remove substantive permissions, obligations, or limitations concerning personal information.
Customer data and AI model training
- The diff contains no express reference to artificial intelligence, machine learning, model training, large language models, automated decision-making, or use of customer data to improve AI systems.
- There is therefore no identifiable change in the Policy’s stated right to use customer data for AI training.
- This conclusion is limited to the text shown. The underlying policy may still contain general “business purposes,” analytics, service-improvement, or vendor-processing language that could potentially cover AI-related uses, but those provisions are not substantively changed in this diff.
- Customers should not assume that the absence of a change here confirms that their data cannot be used for AI training; a separate review of the complete current Policy, Terms, data-processing agreement, and subprocessors list would be necessary.
Potentially relevant wording changes
Scope of information collection
The revised text corrects punctuation and formatting in provisions describing information collected:
- Through the Tropic Platform.
- Through email, text, and other electronic messages.
- Through interactions with third-party websites, applications, advertising, authentication procedures, and content.
- That identifies individuals or companies, or relates to individuals without directly identifying them.
These changes appear clarifying rather than substantive. No new category of data collection is clearly added.
User Contributions
The definition of “User Contributions” is reformatted, including information posted on the Platform or transmitted to other users or third parties. The apparent rights and disclosures associated with User Contributions are unchanged.
Google SSO
The reference to “Google’s Limited Use Policy” and Tropic’s use and transfer of information received through Google SSO is reformatted. No change to Google-data handling permissions is apparent.
Data management and security
The wording referring to Tropic’s data management policy and the “Data Security” section is corrected and separated typographically. There is no apparent change to security commitments or data-retention obligations.
Third parties and transfers
References to:
- Promotional use of email addresses;
- Third-party interest-based advertising;
- Transfers in connection with corporate reorganizations, bankruptcy, or asset sales; and
- Subprocessors
appear to be punctuation or link-format corrections only. These provisions may remain important operationally, but the diff does not expand or narrow them.
Key risk conclusion
No new material legal risk is apparent from the shown changes. The principal diligence issue is that the diff provides no express AI-training restriction or authorization. If AI use is a concern, the contract should address it expressly, including whether customer content, personal information, metadata, or derived data may be used to train general-purpose or service-specific models, and whether customers can opt out.
2026-09-25 · Privacy Policy
Summary of Important Changes
Overall assessment
The diff is primarily editorial and formatting-related. It changes curly quotation marks to straight quotation marks, removes or adjusts punctuation and spacing, and revises some contact-information text. No express provision was added or removed regarding the use of customer data to train, fine-tune, or improve AI models.
AI training and model-use provisions
- The revised language does not mention:
- Artificial intelligence or machine-learning models;
- Training, fine-tuning, evaluating, or improving AI systems;
- Whether customer data, User Contributions, or platform content may be used for AI development;
- Whether data is de-identified or aggregated before such use; or
- Any customer opt-out or consent mechanism for AI training.
- Accordingly, the diff does not appear to expand or restrict AI-training rights. However, the absence of a specific restriction means the policy should be read together with the applicable customer agreement, data-processing agreement, product terms, and any separate AI terms. Those documents may address these issues more directly.
Other notable changes
1. Revised description of information collected
The policy’s introductory language has been lightly reformatted. It continues to describe information collected through:
- The Tropic Platform;
- Email, text, and other electronic messages; and
- Interactions with advertising or applications on third-party websites.
There is no apparent substantive expansion of the listed collection methods.
2. User Contributions language retained
The revised text continues to define information that users post on the platform or transmit to other users or third parties as “User Contributions.” The diff does not show a change to the rights Tropic receives in those contributions or to how they may be used.
3. Google SSO reference
The wording referring to Google’s Limited Use Policy and Tropic Google SSO has been reformatted. No substantive change to Google data-use permissions is apparent from the diff.
4. Data transfers and marketing
The policy continues to address transfers of personal information in connection with a reorganization, dissolution, bankruptcy, or sale of assets. It also retains the ability to use an email address to promote Tropic’s or third parties’ products, with an opt-out by emailing privacy@tropicapp.io. No apparent change to these rights is shown.
5. Data-management contact language
The revised text adds or clarifies:
> “If you have any questions about our data management policy, please contact us at privacy@tropicapp.io.”
This is primarily a clarification of contact information rather than a new substantive obligation.
6. Contact and website-content changes
The Contact Information and Subprocessors sections have been reorganized, and a link to the candidate privacy notice appears to have been altered or followed by marketing content. The inserted promotional text (“Drive savings and efficiency… Schedule a Demo”) may be accidental website-content contamination and should be reviewed for proper placement and formatting.
Key risk
Because the policy contains no clear AI-training limitation, customers seeking assurance that their data will not be used to train AI models should obtain an express contractual commitment elsewhere.
2026-09-19 · Privacy Policy
Summary
The provided diff states only that approximately 51 words were removed from the document. The specific deleted language is not included.
Legal and Commercial Impact
Because the removed text is unavailable, it is not possible to determine:
- Which contractual rights or obligations changed;
- Whether liability, indemnification, confidentiality, security, or termination provisions were affected;
- Whether the deletion narrows or expands either party’s rights;
- Whether any limitations of liability, warranties, or remedies were removed; or
- Whether the deletion creates ambiguity or removes an important customer protection.
AI Training and Data Use
No conclusion can be reached about changes to the use of customer data for training AI models. The removed language could potentially have addressed:
- Whether customer data may be used to train, fine-tune, or improve AI models;
- Whether prompts, inputs, outputs, telemetry, or usage data may be retained;
- Whether data is used in aggregated, de-identified, or identifiable form;
- Whether the customer must opt in or may opt out of AI training;
- Whether data is shared with affiliates or third-party model providers;
- Ownership or permitted use of model outputs; or
- Security, deletion, confidentiality, or restrictions applicable to training data.
If any of these provisions were deleted, the change could materially affect the customer’s control over its data and the provider’s ability to use that data for model development.
Recommended Next Step
Provide the actual deleted wording, or a redline showing the 51 removed words. Without that text, the legal significance and any AI-data-training implications cannot be reliably assessed.
2026-09-18 · Privacy Policy
Summary
The supplied diff does not include the actual amended legal language. It only states:
> “Added approximately 51 words to the document”
Accordingly, the substantive changes and associated legal risks cannot be assessed.
AI Training and Customer Data
- No language is provided concerning:
- Whether customer data may be used to train, fine-tune, or improve AI models;
- Whether prompts, inputs, outputs, personal information, or confidential information are retained;
- Whether data is shared with affiliates, service providers, or third-party model providers;
- Whether customers can opt out of AI training or request deletion;
- Ownership or licensing rights in customer data, outputs, or trained models; or
- Security, anonymization, or restrictions on human review.
Therefore, no conclusion can be reached about whether the document expands or limits the provider’s rights to use customer data for AI training.
Information Needed
Please provide the actual redline text, using the stated notation:
- Additions:
{new language} - Deletions:
[deleted language] - Replacements:
[old language]{new language}
Without the underlying 51 words and their location in the agreement, it is not possible to identify new obligations, expanded permissions, liability exposure, privacy implications, or AI-training risks.
2026-09-18 · Privacy Policy
Summary of Important Changes
Overall assessment
The diff appears to make primarily editorial, formatting, and typographical corrections. It does not materially revise the categories of information collected, purposes of use, disclosures, security commitments, or user rights.
Notable changes
1. Formatting and punctuation corrections
The policy now uses more consistent:
- Curly quotation marks around defined terms, such as “Tropic,” “Website,” “Policy,” “personal information,” and “User Contributions.”
- Spacing and punctuation in numbered lists.
- Apostrophes in possessives, including “Google’s,” “Tropic’s,” and “third parties’.”
- Formatting around section headings and hyperlinks.
These changes do not appear to alter the legal meaning.
2. Clarification of collection sources
The revised text preserves the statement that Tropic may collect information:
- Through access to and use of the Tropic Platform;
- Through email, text, and other electronic messages connected with the Platform;
- When users interact with Tropic’s advertising or applications on third-party websites; and
- From third parties, including through authentication procedures or third-party applications and content.
No new category of data source is clearly added; the changes mainly correct formatting and list structure.
3. User Contributions
The definition of “User Contributions” remains substantially unchanged. It continues to cover information posted on the Platform or transmitted to other users or third parties. The revised language does not appear to expand Tropic’s rights to use such contributions.
4. Google SSO language
The reference to Google’s Limited Use Policy and Tropic’s use or transfer of information received through Google SSO remains present. The change is typographical and does not appear to change the stated limitations.
5. Data management, security, and subprocessors
The revised policy continues to reference:
- Tropic’s data management policy;
- Security measures designed to protect personal information;
- A subprocessors webpage; and
- A candidate privacy notice.
The changes appear to repair formatting and link presentation rather than modify these obligations or disclosures.
AI model training
No express change concerning AI training was identified.
The diff does not add or remove language stating whether customer data, personal information, User Contributions, or Platform data may be:
- Used to train, fine-tune, or improve artificial intelligence or machine-learning models;
- Shared with AI providers for model training;
- Excluded from model training; or
- Subject to opt-out, deletion, or confidentiality protections in connection with AI.
Accordingly, this diff does not clarify Tropic’s AI-training practices. Any permissions or restrictions concerning AI training would need to be located elsewhere in the policy, terms of service, data processing agreement, or product documentation.
2026-09-17 · Privacy Policy
Executive Summary
The changes are primarily grammatical, punctuation, formatting, and website-content updates. No express change was identified regarding use of customer data to train, fine-tune, evaluate, or improve artificial-intelligence models.
Important Changes
1. No apparent AI-training provision
- The diff does not add or remove language authorizing Tropic to use customer data, personal information, User Contributions, or platform data to:
- Train or fine-tune AI models;
- Evaluate or improve AI systems;
- Create model inputs, outputs, or derived datasets; or
- Share data with AI providers for those purposes.
- Existing broad-purpose language remains generally relevant, including use of information for purposes disclosed by Tropic, research purposes, service operation, advertising, legal compliance, and business transfers. Depending on the full policy, those provisions could still be interpreted broadly, but the diff itself does not expand them specifically for AI.
2. Google SSO language reformatted
- The reference to “Google’s Limited Use Policy” and “Tropic Google SSO’s use and transfer” was changed mainly by replacing typographic apostrophes and adjusting spacing.
- No substantive change to Google data-use restrictions is apparent. The underlying Google-related authorization should nevertheless be reviewed in the complete policy to confirm whether it limits use of Google user data to providing or improving the SSO functionality.
3. Data collection and disclosure language
- Several changes standardize punctuation and quotation marks in descriptions of:
- Personal information;
- Company-identifying information;
- Automatically collected information;
- User Contributions; and
- Information obtained through third-party authentication or applications.
- These edits do not appear to change the categories of data collected or the purposes for collection.
4. Data-management contact clarification
- The prior reference to “Tropic’s data management policy” was revised to add:
“If you have any questions about our data management policy, please contact us at privacy@tropicapp.io.”
- This adds a contact route but does not provide additional substantive rights, restrictions, retention limits, or security commitments.
5. Contact and website-content changes
- A general privacy-contact statement was added before the subprocessors reference.
- The subprocessors URL remains included.
- Marketing copy was inserted: “Drive savings and efficiency at any stage… Schedule a Demo.”
- The candidate privacy notice link appears to have been malformed or concatenated with the word “Drive”. This may create a broken link or confusing user experience and should be corrected.
Risk Assessment
- AI-training risk: No direct change identified.
- Privacy-scope risk: Existing broad-purpose provisions remain and should be reviewed separately for possible coverage of analytics, research, product improvement, or AI-related processing.
- Operational risk: The apparent malformed candidate-privacy-notice link and inserted marketing text may cause navigation, disclosure, or presentation issues.
2026-09-17 · Privacy Policy
Summary
The provided diff states only that approximately 51 words were removed from the document. It does not identify:
- Which provisions were deleted;
- Whether the deletions were replaced with different language;
- Whether any customer rights or supplier obligations changed; or
- Whether the changes affect the use of customer data to train AI models.
AI Training and Data-Use Analysis
No reliable conclusion can be drawn about AI-model training from the information provided. The removed language could potentially have addressed:
- Permission to use customer data, content, prompts, outputs, or usage data to train or improve AI models;
- Whether data may be used for general or shared (“cross-customer”) model training;
- Opt-out or consent requirements;
- Anonymization, aggregation, or de-identification standards;
- Restrictions on human review or access to customer data;
- Ownership of data, inputs, and outputs; or
- Deletion and retention obligations.
However, the diff does not reveal whether any of these provisions were removed. The deletion could either narrow the provider’s rights—for example, by removing a broad training license—or remove customer protections, such as an opt-out right or a prohibition on training.
Risk Assessment
Current assessment: Indeterminate. The absence of the deleted wording prevents a meaningful legal-risk analysis. In particular, it is not possible to determine whether:
1. Customer data may now be used for AI training;
2. Existing restrictions on training were deleted;
3. The provider’s rights to retain, analyze, or commercialize customer data changed; or
4. The customer lost any notice, consent, opt-out, confidentiality, or deletion protections.
Information Needed
To complete the analysis, provide the actual redlined text or at least:
- The 51 deleted words;
- The surrounding provision or section heading;
- Any replacement language; and
- The prior and revised versions of the relevant data-use, confidentiality, privacy, or AI provisions.
2026-09-16 · Privacy Policy
Summary
The diff does not include the actual added, deleted, or replaced contractual language. It only states that approximately 51 words were added.
Key Changes
- No substantive legal changes can be identified from the information provided.
- AI training and data-use provisions: No conclusion can be reached about whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
- Potential risks: The missing language could affect important issues such as:
- Whether customer data, prompts, outputs, or personal information may be used for model training.
- Whether use is limited to aggregated, anonymized, or de-identified data.
- Whether the customer must opt in or may opt out.
- Whether data is retained after termination.
- Whether data may be shared with subprocessors or third-party AI providers.
- Ownership and confidentiality protections for customer data and AI outputs.
Conclusion
The actual 51-word addition—or the complete before-and-after text—is required to perform a meaningful legal analysis.
2026-09-14 · Privacy Policy
Summary
- Change identified: Approximately 51 words were removed from the document.
- Substantive analysis: The actual deleted text was not provided, so it is not possible to determine what contractual rights, obligations, limitations, or protections were removed.
- AI training/data use: No conclusion can be reached about changes to the customer’s data being used to train AI models. The deleted language could potentially have addressed:
- Whether customer data may be used to train, fine-tune, or improve AI models;
- Whether usage is limited to anonymized or aggregated data;
- Whether customer consent is required;
- Whether data is retained after termination;
- Whether the provider may use inputs, outputs, metadata, or usage data; or
- Confidentiality, security, opt-out, or deletion protections.
Potential Risk
Deletion of language concerning data use could either:
1. Reduce the provider’s rights, if the removed text authorized AI training or broad data use; or
2. Reduce the customer’s protections, if the removed text restricted AI training, required consent, or provided an opt-out.
Without the deleted wording and the surrounding provisions, the direction and significance of the change cannot be reliably assessed.
Recommended Review
Compare the prior and revised versions, focusing particularly on provisions containing terms such as “train,” “improve,” “develop,” “machine learning,” “artificial intelligence,” “customer data,” “inputs,” “outputs,” “aggregated,” “anonymized,” “retention,” and “opt out.”
2026-09-14 · Privacy Policy
Executive Summary
The diff is primarily editorial and formatting-related. It changes curly quotation marks to straight quotation marks, adjusts punctuation and spacing, and corrects or reorganizes some contact and policy references. No clear substantive expansion or restriction of data rights or permitted data uses appears in the provided changes.
Important Changes
1. No apparent change to AI-model training
- The diff does not add language authorizing Tropic to use customer data, personal information, User Contributions, or platform content to train, fine-tune, or improve artificial-intelligence or machine-learning models.
- It also does not appear to remove an existing AI-training restriction or commitment, although the provided excerpt may not contain the entire relevant policy.
- The existing references to information being used for “research purposes” are not changed in substance in the diff. That phrase could be broad, but the amendment does not appear to expand it.
2. Google authentication language
- The reference to Google’s Limited Use Policy and Tropic Google SSO is changed only from curly to straight apostrophes and through spacing/formatting.
- No apparent change is made to how information received from Google may be used or transferred.
3. Data collection and disclosure provisions
The listed categories and sources of information appear substantively unchanged, including:
- Personal information identifying an individual.
- Company information.
- Non-identifying or aggregated information.
- Information provided directly by users.
- Information collected automatically through platform use.
- User Contributions posted or transmitted through the platform.
- Disclosures for purposes described in the policy, with consent, legal compliance, corporate transactions, and related purposes.
4. Marketing and third-party advertising
- References to Tropic or third parties using email addresses for promotional purposes are unchanged in substance.
- The opt-out mechanism—emailing
privacy@tropicapp.io—remains. - The statement that Tropic does not control third parties’ collection or use of information for interest-based advertising remains.
5. Data management and security
- The wording changes a reference from “Tropic’s data management policy” to “Tropic's data management policy” and adds a sentence directing questions to
privacy@tropicapp.io. - The general statement that Tropic has implemented security measures remains unchanged.
- This does not create a specific security guarantee, breach-notification obligation, retention period, or deletion right.
6. Contact information and webpage content
- A “Contact Information” section is restored or clarified, including the privacy email address.
- The subprocessor webpage reference remains.
- The diff appears to introduce malformed or unintended text:
candidate-privacy-noticeDrive, followed by marketing copy such as “savings and efficiency at any stage” and “Schedule a Demo.”
Key Risks
- The malformed webpage and marketing text could create presentation, interpretation, or compliance issues if published as written.
- The absence of AI-training language should not be treated as confirmation that customer data is never used for AI purposes; other agreements, product terms, or policies may address that issue.
2026-09-12 · Privacy Policy
Summary of Important Changes
Overall assessment
The diff appears to contain primarily typographical, punctuation, formatting, and quotation-mark changes. It does not materially change the stated categories of information collected, purposes of use, disclosures, security language, or user rights based on the text provided.
AI model training and customer data
- No express change concerning AI training was identified.
- The revised text does not add or remove language authorizing Tropic to:
- Use customer or User Contribution data to train, fine-tune, or evaluate AI models;
- Permit third-party AI providers to use customer data for model training;
- Create or commercialize models based on customer data; or
- Exclude customer data from AI training.
- The existing language concerning User Contributions remains substantively unchanged. It states that information users post on or transmit through the platform may be shared with other users or third parties, but the diff does not expand this into an explicit AI-training right.
- Because the policy still refers broadly to use of information for purposes disclosed in the policy and to third-party services, customers should confirm whether AI-related processing is addressed elsewhere, such as in the customer agreement, data processing addendum, acceptable-use policy, or product terms.
Other notable changes
Definitions and collection sources
- Minor punctuation and formatting changes clarify references to the Website, Tropic Platform, personal information, company information, and information collected from third parties.
- The categories of information and collection methods appear unchanged.
Google SSO information
- The reference to Google’s Limited Use Policy and Tropic’s use or transfer of information received through Google SSO appears substantively unchanged. The edit is primarily typographical.
Business transfers
- The language allowing personal information to be transferred in connection with a merger, reorganization, bankruptcy, liquidation, or sale of assets remains substantively unchanged.
- This continues to create a risk that customer information may be transferred to an acquiring entity as part of a transaction.
Marketing and advertising
- The opt-out language for promotional emails and the disclaimer regarding third-party interest-based advertising remain unchanged.
- Tropic continues to disclaim control over third parties’ collection and use of information for interest-based advertising.
Security and data management
- The reference to Tropic’s data management policy and security measures appears unchanged.
- The policy still describes security measures generally, without adding specific security commitments, breach-response obligations, or customer audit rights.
Notices and links
- The policy retains links to Tropic’s subprocessors list and candidate privacy notice.
- Formatting changes may improve or impair display depending on implementation, so the final HTML should be checked to ensure links and headings render correctly.
Key takeaway
The provided diff does not appear to introduce a new AI-training permission or restriction. Any intended change regarding AI use may be absent from this diff or located in another document.
2026-09-10 · Privacy Policy
Summary
The diff indicates that approximately 51 words were added, but it does not include the actual added language. As a result, the legal and business impact cannot be reliably assessed.
AI Training and Customer Data
- No determination possible: The provided diff does not show whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
- Items requiring review: The added language should be checked for:
- Permission to use customer content, inputs, outputs, metadata, or personal information for AI training;
- Whether use is automatic or requires the customer’s opt-in consent;
- Whether data is anonymized, de-identified, aggregated, or retained in identifiable form;
- Whether data may be shared with affiliates, vendors, or third-party AI providers;
- Whether the customer can opt out or request deletion;
- Any restrictions on confidential, regulated, or personal data;
- Ownership or licensing rights in customer inputs and AI-generated outputs.
Other Legal Risks
The missing text could also affect:
- Confidentiality obligations;
- Data retention and deletion;
- Security commitments;
- Intellectual-property ownership and licenses;
- Liability, indemnification, or warranty disclaimers;
- Compliance with privacy and data-protection laws;
- The customer’s ability to terminate or restrict use of its data.
Conclusion
No substantive change can be identified from the information provided. The full 51-word addition is necessary to determine whether it creates new rights to use customer data, including for AI model training, or imposes additional obligations or risks.
2026-08-26 · Privacy Policy
Summary
The diff only states that approximately 51 words were removed from the document. The actual deleted language is not provided.
AI Training and Data Use
- It is not possible to determine whether the removed text addressed:
- Use of customer data to train, fine-tune, or improve AI models;
- Whether customer data may be used for general-purpose or third-party model training;
- De-identification, anonymization, or aggregation of customer data;
- Customer consent or opt-out rights;
- Restrictions on using prompts, outputs, files, or usage metadata for training;
- Retention, deletion, or human-review practices relating to AI systems.
- If the deleted language contained restrictions on AI training or data use, its removal could expand the provider’s rights to use customer data or create ambiguity about those rights.
Other Potential Legal Impact
Because the deleted wording is unavailable, it is also impossible to assess whether the changes affect:
- Confidentiality obligations;
- Intellectual-property ownership or licensing;
- Data-protection compliance;
- Security obligations;
- Data retention or deletion;
- Liability, indemnification, or audit rights;
- Customer notice or consent requirements.
Risk Assessment
The change should be treated as indeterminate but potentially material, particularly if the document concerns software, cloud services, or AI-enabled products. A deletion of only 51 words can materially alter a limitation, exception, consent requirement, or data-use authorization.
Recommended Next Step
Obtain the actual redline or the deleted wording before accepting the amendment. Compare the removed text with the surrounding provisions and specifically confirm that the contract clearly states:
1. Whether customer data may be used to train or improve AI models;
2. Whether such use requires customer consent;
3. Whether customer data is excluded from general or third-party model training;
4. How prompts, outputs, and usage metadata are handled; and
5. What deletion, retention, confidentiality, and security protections apply.
2026-08-25 · Privacy Policy
Summary of Important Changes
Overall assessment
Most changes are editorial or formatting-related, including replacing curly quotation marks and apostrophes with straight ones, correcting spacing, and adding punctuation. These changes do not appear to alter the parties’ substantive rights or obligations.
Data collection and use
- The policy continues to state that Tropic may collect:
- Personal information, such as names and email addresses;
- Company information, such as company size and number of employees; and
- Non-identifying information about users.
- The listed collection methods remain substantially unchanged, including information provided directly by users, collected automatically through use of the platform, and obtained from third parties.
- The policy continues to permit use of information for purposes disclosed in the policy, with consent, and for other stated business and legal purposes.
AI model training
- No express change regarding use of customer data to train artificial intelligence or machine-learning models was identified.
- The revised text does not add or remove language expressly authorizing Tropic to:
- Train AI or machine-learning models using customer data;
- Use customer content, prompts, documents, or other user contributions for model development;
- Create aggregated or de-identified datasets for AI training; or
- Permit third-party AI providers to use customer data for training.
- However, the policy’s general-purpose data-use language may still be broad enough to permit uses described elsewhere in the policy, other agreements, or disclosed with consent. Customers should review the applicable platform terms, data-processing agreement, and product-specific AI terms for any separate AI provisions.
Google SSO
- The revised wording more clearly references Google’s Limited Use Policy and “Tropic Google SSO’s use and transfer” of information received from Google.
- This appears primarily to clarify or repair the existing Google SSO disclosure rather than create a clearly new permission. Nevertheless, users should confirm what Google account information Tropic receives and how it is used.
Data management and security
- The policy now provides a specific email address—
privacy@tropicapp.io—for questions about Tropic’s data-management policy. - This improves contact clarity but does not appear to add a new security commitment or materially change Tropic’s security obligations.
Third-party disclosures and notices
- The policy continues to reference Tropic’s subprocessors and now more clearly provides a link to the candidate privacy notice.
- The references to subprocessors and candidate information may increase transparency, but the excerpt does not change the scope of permitted disclosures or impose customer approval rights.
Marketing
- The existing opt-out process for promotional emails remains. No material change to marketing permissions was identified.
2026-08-23 · Privacy Policy
Summary of Important Changes
Overall Assessment
The diff appears to make primarily formatting, punctuation, quotation-mark, and webpage-text cleanup changes. It does not appear to add or remove substantive data-use rights, security commitments, or user rights.
Changes Identified
1. No apparent change to AI-model training rights
- The diff contains no express reference to artificial intelligence, machine learning, model training, model improvement, generative AI, or use of customer data to train models.
- No language appears to have been added authorizing Tropic or its service providers to use customer data, User Contributions, or personal information for AI training.
- Likewise, the diff does not add a prohibition or limitation on such use.
- Any AI-training terms that may exist elsewhere in the full Privacy Policy, Terms of Service, Data Processing Addendum, or product documentation are not shown in this diff and cannot be assessed here.
2. Terminology and punctuation standardized
The revision changes straight quotation marks and apostrophes to typographic quotation marks, including references to:
- “Tropic”
- “Website”
- “Policy”
- “personal information”
- “posted”
- “User Contributions”
- “Tropic’s”
- “Google’s”
These edits do not appear to change the legal meaning.
3. Data-collection descriptions reformatted
Several list items and sentence breaks were corrected, including descriptions of information collected:
- Through the Tropic Platform
- Through electronic messages
- Through third-party websites, applications, authentication procedures, and advertising
- Directly from users or automatically through platform use
The apparent changes are grammatical and formatting-related rather than substantive.
4. Google SSO language
The reference to Google’s Limited Use Policy and “Tropic Google SSO’s use and transfer” was reformatted. The diff does not show any change to:
- The categories of Google data collected
- How Google data may be used or transferred
- Any restrictions imposed by Google’s Limited Use Policy
5. Data management and security sections
The reference to Tropic’s data management policy and the “Data Security” heading was cleaned up. No new security obligation, standard, warranty, or breach-notification commitment is visible.
6. Subprocessor and candidate privacy links
The subprocessor and candidate privacy notice references were cleaned up, and apparent promotional footer text was removed. This may improve presentation but does not appear to change Tropic’s authority to use subprocessors.
Key Risk Takeaway
The diff does not create an identifiable new legal risk or new AI-training permission. However, because it does not address AI use, customers should review the complete agreement set for separate provisions allowing use of customer data for analytics, service improvement, de-identification, or AI/model training.
2026-08-22 · Privacy Policy
Summary
The provided diff does not include the actual contractual language that was added, deleted, or replaced. It only states:
> “Added approximately 51 words to the document”
Accordingly, no specific legal changes or risks can be identified from the information provided.
AI Training and Customer Data
The diff does not reveal whether the added text changes:
- Whether customer data may be used to train, fine-tune, or improve AI models;
- Whether customer prompts, inputs, outputs, files, or usage data are used for model development;
- Whether training is conducted by the provider or third-party service providers;
- Whether the customer can opt out of AI training or must pay for an opt-out;
- Whether data is anonymized, aggregated, or de-identified before use;
- Whether the provider obtains ownership or a broad license to use customer data;
- How long training-related data is retained; or
- Whether customer data may be transferred across jurisdictions.
Risk Assessment
Because the actual 51 added words are missing, it is not possible to determine whether they:
- Expand the provider’s rights to use customer data;
- Create a new license or ownership claim;
- Permit disclosure to affiliates or vendors;
- Reduce confidentiality protections;
- Change data-retention or deletion obligations;
- Limit the customer’s ability to object to AI-related processing; or
- Introduce compliance, privacy, or intellectual-property risks.
Information Needed
To perform a meaningful legal review, provide the exact text of the additions and any surrounding provisions, particularly sections addressing:
- Customer data and content;
- Confidentiality;
- Privacy and data processing;
- AI, machine learning, or model training;
- Intellectual-property rights; and
- Data retention and deletion.